I. Privacy Policy

Last Updated: 19/01/2026

Introduction
I DO Stichting (“we,” “us,” or “our”) is a Netherlands-based non-profit organization operating the I DO Project, an educational course integrated within the Rotterdam School of Management (RSM). We are committed to processing your personal data transparently and in strict accordance with the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (Uitvoeringswet Algemene verordening gegevensbescherming).

Who Is the Data Controller?
For the purposes of the GDPR, the data controller is:

• Entity Name: I DO Stichting

• Address: Bethlehemstraat 11A, 3061GA Rotterdam

• Chamber of Commerce (KvK) No: 84392983

• Email: info@idofoundation.com

If you have any questions about this Privacy Policy or how we handle your data, you may contact us using the details above.

What Data Do We Collect?
We collect only the minimum amount of personal data necessary to operate the website and communicate with visitors.

Website Visitors (Technical Data)
When you visit our website, we may automatically collect:

• IP address

• Browser type and version

• Device type and operating system

• Pages visited and time spent on the site

This data is collected via cookies or similar technologies and is used only in aggregated or pseudonymized form where possible.

Voluntary Communication Data
If you contact us directly (e.g., via email or a contact form), we may collect:

• Your name

• Your email address

• Any personal information you choose to include in your message

Why Do We Use Your Data?
We process personal data only for the following purposes:

1. Communication: To respond to inquiries, requests, or messages that you send to us.

2. Website Improvement: To analyze how visitors use our website so we can improve its performance, usability, and content.

3. Course and Educational Development: To understand general engagement with the “I DO” initiative and refine the structure, curriculum, and materials of the course.

Legal Basis for Processing
Under the GDPR, we rely on the following legal bases:

1. Consent: When you voluntarily provide personal data or accept non-essential cookies.

2. Legitimate Interest: To ensure the security, functionality, and continuous improvement of our website and educational activities, provided these interests do not override your fundamental rights and freedoms.

3. Cookies and Similar Technologies: Our use of cookies is explained in our Cookie Policy. Non-essential cookies are used only after you have given explicit consent via our cookie banner.

Data Sharing and Third Parties
We do not sell or rent your personal data.

Your data may be shared only with:

• Technical service providers (e.g., website hosting or analytics providers)

• Parties legally required to receive data under applicable law

• All third parties are required to process data in compliance with GDPR and only on our instructions.

Website Hosting
Our website is hosted by Squarespace, Inc., which acts as a data processor on our behalf. Squarespace may process technical data (such as IP addresses and usage data) necessary to operate and secure the website. Squarespace’s servers may be located outside the European Economic Area. Where this occurs, appropriate safeguards such as the European Commission’s Standard Contractual Clauses are applied.

Data Retention
We do not retain personal data longer than necessary:

• Communication data: (emails, messages) is retained only as long as needed to handle your inquiry or for internal reference related to the development of the course.

• Technical and analytics data: is retained in accordance with our analytics configuration and applicable legal requirements.

Your Rights Under GDPR
You have the right to:

• Access your personal data

• Correct inaccurate or incomplete data

• Request deletion of your data

• Restrict or object to processing

• Withdraw consent at any time (where processing is based on consent)

• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise your rights, contact us at info@idofoundation.com.

Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The most current version will always be available on this website, with the “Last Updated” date shown above.